I-GeoServer ne-PostGIS: indlela ye-VPN ebalulekile ingeyaseva

Uvula isendlalelo ku-QGIS futhi siyakhonjiswa. Uzakwenu ku-VPN efanayo uthola iphutha lesendlalelo esifanayo. Othile uphetha ngokuthi i-VPN yephukile, futhi ihora elilandelayo lichitheka ekuhambiseni isizindalwazi noma ekuvuleni imbobo eyayingakudingi nakukodwa kwalokhu. Isicelo esivela kudeskithophu kanye nombuzo i-GeoServer ewuthumela ku-PostGIS zisuka emishinini ehlukene, ezindaweni zamagama zenethiwekhi ehlukene, ngezinketho zokufinyelela ehlukene. Ukuhlukanisa lezi zindlela ezimbili yikho okuningi kokuxilonga.

Izixhumo ezimbili, imithombo emibili

QGIS  ->  client's permitted path (often the VPN)  ->  GeoServer listener
GeoServer -> server's permitted path  ->  PostGIS listener

Umcibisholo wesibili awutholi ifa lomhubhe wekhompyutha yokuqala. I-GeoServer kusiqukathi inenqwaba yenethiwekhi yesiqukathi, hhayi eyomnikazi, futhi isiqukathi kunethiwekhi yebhuloho singafinyelela isizindalwazi umnikazi angasifinyeleli, noma okuphambene. Ngakho umsebenzisi ofanayo angaphumelela futhi ahluleke esigabeni esisodwa, kuye ngokuthi impendulo ivela kusikhashana noma embuzweni omusha.

Thola isinyathelo esihlulekile ngempela

Ukwenqatshwa kwezinga lesevisi, isicelo sesithombe esingafinyeleli endaweni yaso yokugcina idatha, kanye nenkinga yemvume esendlalelweni esisodwa kubonakala kufana kuthebhu yesiphequluli futhi kuhluke ngokuphelele kumbhalo weseva. Cela ukusebenza okuqondile, bese ufunda umcimbi we-GeoServer uqobo wesigxivizo sesikhathi esifanayo.

curl -s -o /dev/null -w '%{http_code}\n' \
  "https://gis.example.com/geoserver/wms?service=WMS&version=1.3.0&request=GetCapabilities"

curl -s -o /tmp/tile.png -w '%{http_code} %{size_download}\n' \
  "https://gis.example.com/geoserver/wms?service=WMS&version=1.3.0&request=GetMap&layers=corp:parcels&bbox=-13650000,4500000,-13600000,4550000&width=256&height=256&srs=EPSG:3857&format=image/png"

I-200 evela esicelweni sesibili enesithombe esikholakalayo ifakazela ukuthi indawo yokugcina idatha iphendulile. I-200 enedokhumenti yokuhlukumezeka kwesevisi ifakazela ukuthi ayiphendulanga, futhi umbhalo wokuhlukumezeka uvame ukusho indawo yokugcina hhayi iklayenti.

Funda indawo yokugcina idatha ohlangothini lweseva

Incwadi yereferensi ye-PostGIS ye-GeoServer ibala lokho indawo yokugcina idatha ekudingayo: umnikazi, imbobo, isizindalwazi kanye nezinketho zokufinyelela. Konke lokho kuchaza uxhumo i-GeoServer eluvulayo. Akukho kukho okuchaza ukungena okuvela kuklayenti yedeskithophu. Funda lezo zinkambu ezine njengesitatimende mayelana nomongo wenethiwekhi yeseva, futhi lonke ikilasi lamathikithi athi «kubona kuyasebenza» liyaxazululeka.

Yingakho localhost endaweni yokugcina idatha kuyiphutha elivamile kangaka. Kusho umongo wenethiwekhi wenqubo ye-GeoServer uqobo. Uma i-GeoServer isebenza ku-Docker ngenkathi i-PostGIS isebenza kumnikazi, localhost ikhomba ngaphakathi kwesiqukathi futhi akutholi lutho, futhi akukho ukuhlelwa kwe-VPN okushintsha lokho.

Kuseva, hlola umzila, isilaleli kanye nenqubomgomo yokuqinisekisa ngokulandelana lokho. Ukuqinisekisa kwe-PostgreSQL okusekelwe kumnikazi kuqhathanisa ikheli lomthombo elikubonayo, okungenzeka ligedelwe yisango, ngakho ukwengeza ichibi le-VPN lamaklayenti efayeleni le-HBA akuvamisile ukulungisa uxhumo ohlangothini lweseva. Hlola njengoba iseva ingenza: umnikazi ofanayo, imbobo efanayo, umsebenzisi ofanayo. Uma lokho kuhlola kuphumelela ngenkathi i-GeoServer isahluleka, umehluko usemongweni wenqubo hhayi esizindalwazini.

ip route get 10.20.5.11
ss -tnp | grep 5432
psql "host=10.20.5.11 dbname=gis user=geoserver" -c 'select 1'

Amachibi nezikhashana zigcina isimo phakathi kwezinguquko

Amachibi okuxhumana endawo yokugcina idatha agcina amasokhethi evulekile. Umhubhe owavela ihora ngemva kokudalwa kwechibi awunikezi ichibi umzila omusha njalo, futhi uxhumo olungenzi lutho lungahlala kumzila ofile kuze kube ukuqinisekisa noma isikhathi sokuphela kuyaluvala. Hlola izilungiselelo zokuqinisekisa zendawo yokugcina efakiwe esikhundleni sokucabangela ukululama, futhi ugweme isifiso sokuqalisa kabusha yonke isevisi ngaphambi kokwazi ukuthi yisiphi isendlalelo esihlulekile.

Izikhashana zamathayela zenza isithombe sesibuko sale nkinga: zingahlinzeka ngemephu ebukeka ilungile isikhathi eside ngemva kokunqamuka koxhumo lwesizindalwazi. Ukusula isikhashana ukuze «sibone ukuthi kuyasiza yini» kubhubhisa ubufakazi obukodwa obuzokutshela ukuthi wuphi umzila owawuphila.

Dlulisela ngokusho yomibili imithombo

Incazelo ethola ukulungiswa okusheshayo isho izinto ezimbili: isicelo seklayenti esafinyelela i-GeoServer, kanye nokusebenza kwangemuva i-GeoServer engakwazanga ukukuqedela. Ngakho kokubili, umnikazi ofanele angalungisa umzila ohlulekile. Ngokokuqala kuphela, ukulungiswa okwemvelo ukuveza isizindalwazi esidlangalaleni, okuxazulula ithikithi ngokudala inkinga embi kakhulu.

Qaphela isendlalelo, ikhodi yempendulo, ukuhlukumezeka ohlangothini lweseva kanye nesiqukathi noma umnikazi okukhiqizile. Leyo imigqa emine, futhi isusa ukungacaci ngokuphelele.